1/* 2 Samba Unix/Linux SMB client utility profiles.c 3 4 Copyright (C) Richard Sharpe, <rsharpe@richardsharpe.com> 2002 5 Copyright (C) Jelmer Vernooij (conversion to popt) 2003 6 Copyright (C) Gerald (Jerry) Carter 2005 7 8 This program is free software; you can redistribute it and/or modify 9 it under the terms of the GNU General Public License as published by 10 the Free Software Foundation; either version 3 of the License, or 11 (at your option) any later version. 12 13 This program is distributed in the hope that it will be useful, 14 but WITHOUT ANY WARRANTY; without even the implied warranty of 15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 16 GNU General Public License for more details. 17 18 You should have received a copy of the GNU General Public License 19 along with this program. If not, see <http://www.gnu.org/licenses/>. 20*/ 21 22#include "includes.h" 23#include "regfio.h" 24 25/* GLOBAL VARIABLES */ 26 27DOM_SID old_sid, new_sid; 28int change = 0, new_val = 0; 29int opt_verbose = False; 30 31/******************************************************************** 32********************************************************************/ 33 34static void verbose_output(const char *format, ...) PRINTF_ATTRIBUTE(1,2); 35static void verbose_output(const char *format, ...) 36{ 37 va_list args; 38 char *var = NULL; 39 40 if (!opt_verbose) { 41 return; 42 } 43 44 va_start(args, format); 45 if ((vasprintf(&var, format, args)) == -1) { 46 va_end(args); 47 return; 48 } 49 50 fprintf(stdout, "%s", var); 51 va_end(args); 52 SAFE_FREE(var); 53} 54 55/******************************************************************** 56********************************************************************/ 57 58static bool swap_sid_in_acl( SEC_DESC *sd, DOM_SID *s1, DOM_SID *s2 ) 59{ 60 SEC_ACL *theacl; 61 int i; 62 bool update = False; 63 64 verbose_output(" Owner SID: %s\n", sid_string_tos(sd->owner_sid)); 65 if ( sid_equal( sd->owner_sid, s1 ) ) { 66 sid_copy( sd->owner_sid, s2 ); 67 update = True; 68 verbose_output(" New Owner SID: %s\n", 69 sid_string_tos(sd->owner_sid)); 70 71 } 72 73 verbose_output(" Group SID: %s\n", sid_string_tos(sd->group_sid)); 74 if ( sid_equal( sd->group_sid, s1 ) ) { 75 sid_copy( sd->group_sid, s2 ); 76 update = True; 77 verbose_output(" New Group SID: %s\n", 78 sid_string_tos(sd->group_sid)); 79 } 80 81 theacl = sd->dacl; 82 verbose_output(" DACL: %d entries:\n", theacl->num_aces); 83 for ( i=0; i<theacl->num_aces; i++ ) { 84 verbose_output(" Trustee SID: %s\n", 85 sid_string_tos(&theacl->aces[i].trustee)); 86 if ( sid_equal( &theacl->aces[i].trustee, s1 ) ) { 87 sid_copy( &theacl->aces[i].trustee, s2 ); 88 update = True; 89 verbose_output(" New Trustee SID: %s\n", 90 sid_string_tos(&theacl->aces[i].trustee)); 91 } 92 } 93 94#if 0 95 theacl = sd->sacl; 96 verbose_output(" SACL: %d entries: \n", theacl->num_aces); 97 for ( i=0; i<theacl->num_aces; i++ ) { 98 verbose_output(" Trustee SID: %s\n", 99 sid_string_tos(&theacl->aces[i].trustee)); 100 if ( sid_equal( &theacl->aces[i].trustee, s1 ) ) { 101 sid_copy( &theacl->aces[i].trustee, s2 ); 102 update = True; 103 verbose_output(" New Trustee SID: %s\n", 104 sid_string_tos(&theacl->aces[i].trustee)); 105 } 106 } 107#endif 108 return update; 109} 110 111/******************************************************************** 112********************************************************************/ 113 114static bool copy_registry_tree( REGF_FILE *infile, REGF_NK_REC *nk, 115 REGF_NK_REC *parent, REGF_FILE *outfile, 116 const char *parentpath ) 117{ 118 REGF_NK_REC *key, *subkey; 119 SEC_DESC *new_sd; 120 struct regval_ctr *values; 121 struct regsubkey_ctr *subkeys; 122 int i; 123 char *path; 124 WERROR werr; 125 126 /* swap out the SIDs in the security descriptor */ 127 128 if ( !(new_sd = dup_sec_desc( outfile->mem_ctx, nk->sec_desc->sec_desc )) ) { 129 fprintf( stderr, "Failed to copy security descriptor!\n" ); 130 return False; 131 } 132 133 verbose_output("ACL for %s%s%s\n", parentpath, parent ? "\\" : "", nk->keyname); 134 swap_sid_in_acl( new_sd, &old_sid, &new_sid ); 135 136 werr = regsubkey_ctr_init(NULL, &subkeys); 137 if (!W_ERROR_IS_OK(werr)) { 138 DEBUG(0,("copy_registry_tree: talloc() failure!\n")); 139 return False; 140 } 141 142 if ( !(values = TALLOC_ZERO_P( subkeys, struct regval_ctr )) ) { 143 TALLOC_FREE( subkeys ); 144 DEBUG(0,("copy_registry_tree: talloc() failure!\n")); 145 return False; 146 } 147 148 /* copy values into the struct regval_ctr */ 149 150 for ( i=0; i<nk->num_values; i++ ) { 151 regval_ctr_addvalue( values, nk->values[i].valuename, nk->values[i].type, 152 (const char *)nk->values[i].data, (nk->values[i].data_size & ~VK_DATA_IN_OFFSET) ); 153 } 154 155 /* copy subkeys into the struct regsubkey_ctr */ 156 157 while ( (subkey = regfio_fetch_subkey( infile, nk )) ) { 158 regsubkey_ctr_addkey( subkeys, subkey->keyname ); 159 } 160 161 key = regfio_write_key( outfile, nk->keyname, values, subkeys, new_sd, parent ); 162 163 /* write each one of the subkeys out */ 164 165 path = talloc_asprintf(subkeys, "%s%s%s", 166 parentpath, parent ? "\\" : "",nk->keyname); 167 if (!path) { 168 TALLOC_FREE( subkeys ); 169 return false; 170 } 171 172 nk->subkey_index = 0; 173 while ((subkey = regfio_fetch_subkey(infile, nk))) { 174 if (!copy_registry_tree( infile, subkey, key, outfile, path)) { 175 TALLOC_FREE(subkeys); 176 return false; 177 } 178 } 179 180 /* values is a talloc()'d child of subkeys here so just throw it all away */ 181 182 TALLOC_FREE( subkeys ); 183 184 verbose_output("[%s]\n", path); 185 186 return True; 187} 188 189/********************************************************************* 190*********************************************************************/ 191 192int main( int argc, char *argv[] ) 193{ 194 TALLOC_CTX *frame = talloc_stackframe(); 195 int opt; 196 REGF_FILE *infile, *outfile; 197 REGF_NK_REC *nk; 198 char *orig_filename, *new_filename; 199 struct poptOption long_options[] = { 200 POPT_AUTOHELP 201 { "change-sid", 'c', POPT_ARG_STRING, NULL, 'c', "Provides SID to change" }, 202 { "new-sid", 'n', POPT_ARG_STRING, NULL, 'n', "Provides SID to change to" }, 203 { "verbose", 'v', POPT_ARG_NONE, &opt_verbose, 'v', "Verbose output" }, 204 POPT_COMMON_SAMBA 205 POPT_COMMON_VERSION 206 POPT_TABLEEND 207 }; 208 poptContext pc; 209 210 load_case_tables(); 211 212 /* setup logging options */ 213 214 setup_logging( "profiles", True ); 215 dbf = x_stderr; 216 x_setbuf( x_stderr, NULL ); 217 218 pc = poptGetContext("profiles", argc, (const char **)argv, long_options, 219 POPT_CONTEXT_KEEP_FIRST); 220 221 poptSetOtherOptionHelp(pc, "<profilefile>"); 222 223 /* Now, process the arguments */ 224 225 while ((opt = poptGetNextOpt(pc)) != -1) { 226 switch (opt) { 227 case 'c': 228 change = 1; 229 if (!string_to_sid(&old_sid, poptGetOptArg(pc))) { 230 fprintf(stderr, "Argument to -c should be a SID in form of S-1-5-...\n"); 231 poptPrintUsage(pc, stderr, 0); 232 exit(254); 233 } 234 break; 235 236 case 'n': 237 new_val = 1; 238 if (!string_to_sid(&new_sid, poptGetOptArg(pc))) { 239 fprintf(stderr, "Argument to -n should be a SID in form of S-1-5-...\n"); 240 poptPrintUsage(pc, stderr, 0); 241 exit(253); 242 } 243 break; 244 245 } 246 } 247 248 poptGetArg(pc); 249 250 if (!poptPeekArg(pc)) { 251 poptPrintUsage(pc, stderr, 0); 252 exit(1); 253 } 254 255 if ((!change && new_val) || (change && !new_val)) { 256 fprintf(stderr, "You must specify both -c and -n if one or the other is set!\n"); 257 poptPrintUsage(pc, stderr, 0); 258 exit(252); 259 } 260 261 orig_filename = talloc_strdup(frame, poptPeekArg(pc)); 262 if (!orig_filename) { 263 exit(ENOMEM); 264 } 265 new_filename = talloc_asprintf(frame, 266 "%s.new", 267 orig_filename); 268 if (!new_filename) { 269 exit(ENOMEM); 270 } 271 272 if (!(infile = regfio_open( orig_filename, O_RDONLY, 0))) { 273 fprintf( stderr, "Failed to open %s!\n", orig_filename ); 274 fprintf( stderr, "Error was (%s)\n", strerror(errno) ); 275 exit (1); 276 } 277 278 if ( !(outfile = regfio_open( new_filename, (O_RDWR|O_CREAT|O_TRUNC), 279 (S_IRUSR|S_IWUSR) )) ) { 280 fprintf( stderr, "Failed to open new file %s!\n", new_filename ); 281 fprintf( stderr, "Error was (%s)\n", strerror(errno) ); 282 exit (1); 283 } 284 285 /* actually do the update now */ 286 287 if ((nk = regfio_rootkey( infile )) == NULL) { 288 fprintf(stderr, "Could not get rootkey\n"); 289 exit(3); 290 } 291 292 if (!copy_registry_tree( infile, nk, NULL, outfile, "")) { 293 fprintf(stderr, "Failed to write updated registry file!\n"); 294 exit(2); 295 } 296 297 /* cleanup */ 298 299 regfio_close(infile); 300 regfio_close(outfile); 301 302 poptFreeContext(pc); 303 304 TALLOC_FREE(frame); 305 return 0; 306} 307